Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/494C79FA02F711EBAB7D6729C4F9AE02.roa
File:                     494C79FA02F711EBAB7D6729C4F9AE02.roa (raw, json)
Hash identifier:          4683x0wI7HUiR/ltFhaPpyECg8+UGVHzJ+5+UYoph4U=
Subject key identifier:   0D:40:34:E4:CF:6D:02:08:2A:ED:6A:DE:D6:1F:EF:33:62:63:C0:F4
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       B2E3
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/494C79FA02F711EBAB7D6729C4F9AE02.roa
Signing time:             Thu 08 May 2025 16:02:56 +0000
ROA not before:           Thu 08 May 2025 16:02:56 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     135172
IP address blocks:        103.215.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 18:54:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45795 (0xb2e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:02:56 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cd5b0-9392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d4:ea:98:c2:1c:46:b9:26:5c:80:e9:7d:9f:
                    db:2a:2f:68:2b:c6:b0:28:d2:1f:1c:bd:8f:c2:aa:
                    60:96:d7:b8:75:be:93:84:d0:08:c4:f3:04:83:41:
                    4d:33:78:78:55:5e:6e:d9:96:3e:0a:ab:d7:30:f0:
                    b2:b5:23:44:bb:8a:a9:69:e6:a7:d2:03:86:33:61:
                    f4:14:07:a3:cb:5d:fa:1b:18:c2:6a:33:f2:01:ac:
                    08:23:4b:83:ba:e4:8f:fc:8c:03:7a:cb:27:a2:8a:
                    45:ce:83:ad:a0:1f:f6:c6:99:0d:88:7a:5a:09:07:
                    16:f0:15:da:a4:70:3c:80:30:c8:92:4c:e0:82:8e:
                    d3:74:b2:37:e8:05:7c:2b:27:e7:63:c4:6f:d5:2e:
                    93:bc:f7:34:e6:2b:ea:a9:a1:47:4a:51:1e:17:ee:
                    1a:f7:84:2a:93:3d:9b:06:ee:c3:db:ef:cb:c5:89:
                    d9:b9:f4:11:47:96:3f:9f:a0:01:86:03:a2:b7:d3:
                    07:3e:96:09:56:9d:64:d0:73:db:8f:42:36:c2:5e:
                    2d:4c:e6:7f:c1:5b:fa:1e:71:ac:ab:72:76:18:3a:
                    1f:56:b1:35:fb:94:b9:1e:0a:2d:06:5a:d3:a5:bd:
                    3e:e5:db:fb:7d:95:20:30:48:d7:a5:d9:e6:bd:dc:
                    ed:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:40:34:E4:CF:6D:02:08:2A:ED:6A:DE:D6:1F:EF:33:62:63:C0:F4
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/494C79FA02F711EBAB7D6729C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:19:0c:bc:81:7d:73:a7:b4:0b:d2:7e:e7:ca:0f:d3:9d:e4:
         2f:f9:61:77:fe:68:50:0b:d5:d2:cf:dd:ea:3b:04:8b:71:54:
         41:9d:15:4b:b7:c5:53:61:f4:e9:8e:0b:36:e8:c0:87:5f:76:
         c4:22:1e:7c:9e:cf:aa:ad:6b:27:a1:6e:dd:fc:f7:94:81:89:
         1c:be:07:2d:99:c3:d1:cb:05:c9:56:49:3f:70:7d:5e:b0:43:
         c0:8b:62:e8:4e:83:f7:91:eb:0a:2f:d4:86:a1:b1:7f:b3:97:
         87:95:bc:aa:d8:88:03:f4:2c:5a:de:0f:87:a8:c2:2e:d5:0f:
         d8:b3:06:a5:65:8d:e5:e0:36:f6:aa:c4:22:7b:bb:71:95:d2:
         1e:bb:80:db:c6:3e:20:b4:9a:32:ed:ac:15:14:36:47:4d:87:
         74:89:f0:3d:f9:34:e4:8a:1b:61:d7:c9:01:a4:f5:9f:5b:98:
         59:1e:e9:5c:1e:43:dc:44:4f:32:47:53:4c:9d:50:90:bf:23:
         77:10:cd:94:28:c4:28:85:79:aa:13:27:d3:38:01:5e:36:30:
         2f:91:90:55:c6:18:61:d2:53:55:fd:fd:0a:0d:41:ec:65:33:
         54:f0:a0:fc:8c:db:9d:90:df:8e:a8:06:31:7d:48:79:1e:90:
         ef:51:f3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:54:26 2025 by rpki-client